$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft File: 0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft (raw, json) Hash identifier: pzPp86GnWI5LHArVIS6EjFI7mzaWN1IgnMZ+Rb1f53I= Subject key identifier: BA:A3:51:82:7A:45:F6:04:98:55:F8:09:07:65:F9:B5:F5:CF:6C:4F Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 Certificate issuer: /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Certificate serial: 010D0C9F4328584D54CBCD9D8557EAB1C33CDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft Manifest number: 010D0C9F43285849BB94F28724AAA6089AEB80BB Signing time: Sun 29 Mar 2026 17:00:03 +0000 Manifest this update: Sun 29 Mar 2026 17:00:03 +0000 Manifest next update: Wed 01 Apr 2026 17:00:00 +0000 Files and hashes: 1: 0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl (hash: ju+F/69TP6qplwHDQMQddrVMGDgeGqiypkx4BzM372o=) 2: 0bbe2f43-7a7b-3107-8e8d-1e59c22dd597.roa (hash: 4RibVrSJOZ8QFWHmx9kAr7DqIjgEfp1OqDXcNj5BA6k=) 3: a508865e-49b5-3e38-9f07-6d36278922e2.roa (hash: qcgfgjjSp2dr19JkyWBHu9RVLSAZU35yrOXeftXlbH8=) 4: b4d466f2-e962-3689-8bcd-94237c4b2901.roa (hash: /nAj9K8SzUNrR48g+oS5GO6Q1F1z35wPyjpF3YpN8+U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:cb:cd:9d:85:57:ea:b1:c3:3c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Validity Not Before: Mar 29 17:00:03 2026 GMT Not After : Apr 1 17:00:00 2026 GMT Subject: CN=2b7dff26-32e1-4afb-9a48-31b0c8f638f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:cc:57:d2:0f:09:2a:be:4b:34:a3:00:c7: ae:ff:9a:c8:9d:d9:09:e4:4d:94:22:05:ad:74:de: ea:47:6a:2a:13:4f:e2:ba:5b:66:12:cc:20:b5:a1: 92:05:16:d8:26:85:69:80:6e:fb:da:65:1a:56:b0: d9:f9:d1:76:36:26:d0:d2:79:0c:38:55:89:19:4e: de:2c:47:03:d1:b6:18:80:a9:68:e2:ba:d0:fe:0a: 2c:a9:9a:b0:33:6a:8f:cf:1b:17:5c:95:aa:b5:0e: 2f:20:fe:c0:42:1d:db:ef:b4:e1:1f:5d:2c:65:00: 06:fc:ac:a4:56:51:d1:ab:21:bb:b5:3d:14:a0:1c: 55:9f:c4:d4:5f:d1:c1:fe:0d:0d:2d:c9:5b:23:c0: 61:6c:3e:a3:c1:50:44:fa:8f:57:cb:a3:5c:66:cc: b8:39:27:dd:69:40:a6:88:0c:2d:42:63:25:ce:3d: 6a:fc:7b:04:cf:05:e4:e7:30:d8:ed:b3:f2:ed:33: 36:ae:7e:5d:25:ad:ed:3f:e1:c7:30:f1:e1:02:40: 61:b6:c4:61:32:9f:d7:ac:70:18:bf:3d:fc:ba:66: 74:3e:80:88:51:ff:ce:76:bf:81:be:ec:d6:2d:f6: 81:d1:de:d4:06:0b:49:99:9a:0c:50:d4:7f:a8:23: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:51:82:7A:45:F6:04:98:55:F8:09:07:65:F9:B5:F5:CF:6C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl X509v3 Authority Key Identifier: keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:40:f0:e6:b9:ee:e5:86:e4:35:a4:a6:2d:b0:30:00:1a:c4: 90:c7:d1:02:c7:07:ce:c9:39:92:38:d8:5d:cf:42:fb:06:00: 9a:75:e7:f7:aa:c5:9a:a3:a7:98:83:47:ab:21:57:16:db:a2: c2:03:62:f1:ec:25:e3:0b:49:37:1b:52:21:e7:c2:cd:df:eb: d4:fa:e7:59:07:c0:84:f0:b5:59:fd:fe:c7:fa:3d:17:d3:94: 5d:3a:1a:cc:ac:17:67:dc:b8:37:f5:6e:b8:05:d3:ac:4e:4a: e6:0b:98:36:d0:f4:25:8b:65:e1:d3:6a:53:d2:6f:4b:07:f1: 4e:9e:43:cc:b8:c5:0a:26:10:26:3c:6b:be:7f:32:ff:ad:91: e9:52:f1:5d:29:1c:97:92:6c:f7:d0:32:d0:37:ba:62:4b:96: 5b:9e:49:de:03:6a:75:a7:be:89:db:16:18:da:f1:ac:b4:a7: 23:bb:ff:88:d5:10:56:45:89:1e:29:71:1f:e3:57:7c:0f:56: 7f:73:5e:67:19:56:af:a7:72:94:38:01:13:a1:89:36:c3:c3: d3:c7:af:47:27:5c:03:63:66:f5:93:cd:b9:c3:1a:c0:e6:21: 9e:0b:95:5c:82:05:4a:24:50:46:68:ff:4b:74:87:7e:fb:32: 7f:54:35:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Uy82dhVfqscM834AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgx ZDFiMB4XDTI2MDMyOTE3MDAwM1oXDTI2MDQwMTE3MDAwMFowLzEtMCsGA1UEAxMk MmI3ZGZmMjYtMzJlMS00YWZiLTlhNDgtMzFiMGM4ZjYzOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp/MV9IPCSq+SzSjAMeu/5rIndkJ5E2UIgWt dN7qR2oqE0/iultmEswgtaGSBRbYJoVpgG772mUaVrDZ+dF2NibQ0nkMOFWJGU7e LEcD0bYYgKlo4rrQ/gosqZqwM2qPzxsXXJWqtQ4vIP7AQh3b77ThH10sZQAG/Kyk VlHRqyG7tT0UoBxVn8TUX9HB/g0NLclbI8BhbD6jwVBE+o9Xy6NcZsy4OSfdaUCm iAwtQmMlzj1q/HsEzwXk5zDY7bPy7TM2rn5dJa3tP+HHMPHhAkBhtsRhMp/XrHAY vz38umZ0PoCIUf/Odr+BvuzWLfaB0d7UBgtJmZoMUNR/qCPULQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLqjUYJ6RfYEmFX4CQdl+bX1z2xPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJl NjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvMGIyZTY0ZGEtMGNmMS00 YmFmLWJlOTQtYzIxNmIyYjgxZDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGIyZTY0ZGEtMGNmMS00YmFmLWJl OTQtYzIxNmIyYjgxZDFiLzBiMmU2NGRhLTBjZjEtNGJhZi1iZTk0LWMyMTZiMmI4 MWQxYi5jcmwwHwYDVR0jBBgwFoAUylexWTbC/nFNr5BRyu60vcQIq5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2 YjJiODFkMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYQPDmue7lhuQ1pKYtsDAA GsSQx9ECxwfOyTmSONhdz0L7BgCadef3qsWao6eYg0erIVcW26LCA2Lx7CXjC0k3 G1Ih58LN3+vU+udZB8CE8LVZ/f7H+j0X05RdOhrMrBdn3Lg39W64BdOsTkrmC5g2 0PQli2Xh02pT0m9LB/FOnkPMuMUKJhAmPGu+fzL/rZHpUvFdKRyXkmz30DLQN7pi S5ZbnkneA2p1p76J2xYY2vGstKcju/+I1RBWRYkeKXEf41d8D1Z/c15nGVavp3KU OAEToYk2w8PTx69HJ1wDY2b1k825wxrA5iGeC5VcggVKJFBGaP9LdId++zJ/VDVv -----END CERTIFICATE-----Generated at Mon Mar 30 17:28:50 2026 by rpki-client